Cybercriminals Mimic Slack in Sophisticated Malvertising Campaign

A malvertising campaign placed a fraudulent Slack ad in Google Search that initially redirected to Slack to avoid detection, then later routed users through click trackers and a recently registered domain (slack-windows-download.com) that delivered a SecTopRAT remote-access/infostealer payload; Malwarebytes analyzed the campaign, captured network traffic, and reported the malicious domains to Google and Cloudflare.